JQuery security error in Opera and Internet Explorer

Question

I am developing an app for social network which works in IFrame. The app works just fine in Google Chrome and Microsoft Firefox browsers, but in Opera 12.15 JQuery library v1.10.1 fails to load with security error Unhandled error: Security error: attempted to read protected variable on line 1513.

The screenshot is here:

It looks like the same bug exists in Internet Explorer 10.

How to deal with it?

UPDATE:

I have made dirty hack by commenting the lines 1513-1517 in the code of jquery:

   // Support: IE>8
   // If iframe document is assigned to "document" variable and if iframe has been reloaded,
   // IE will throw "permission denied" error when accessing "document" variable, see jQuery #13936
  /*if ( parent && parent.frameElement ) {
        parent.attachEvent( "onbeforeunload", function() {
            setDocument();
        });
    }*/

The functionality of my app seems to work now, maybe it is necessary to create issue in JQuery repo...

Silo

does the iframe load the contents from the same domain? – Carnarvon

@Carnarvon not, from the different – Silo

maybe this is the reason then. try to access it when the same domain is used and see if it works. – Carnarvon

@Carnarvon But FF and Chrome work very well... – Silo

@Carnarvon but my application is on the other domain and it is loading in social network's iframe – Silo

it's not the same bug as described above in comments for IE8? Insert breakpoint in debugger to error line and check variables. – Pithos

@Pithos do you have a link to description? – Silo

@zavg, bugs.jquery.com/ticket/13936 – Pithos

@Pithos in my case jquery is not loading at all – Silo

@zavg, Сlear all private data in the Opera browser and check again. – Pithos

@Pithos I have just downloaded it and used it only to test my app :) – Silo

I can confirm the bug at jsfiddle: jsfiddle.net/SKfax (from the question jquery multi level accordion) - though that uses a very old jQuery version – Kabob

@Kabob Maybe you write a comment on that issue with your jsfiddle link (bugs.jquery.com/ticket/13980) – Silo

Answer 1

Bug report was created - http://bugs.jquery.com/ticket/13980. Bug is now fixed.

Silo

jQuery 1.10.2 and 2.0.3 contain the bug fix you mention. – Mayers

Answer 2

Add this before you include JQuery:

var isIE11 = !!(navigator.userAgent.match(/Trident/) && !navigator.userAgent.match(/MSIE/));
if (isIE11) {
    if (typeof window.attachEvent == "undefined" || !window.attachEvent) {
        window.attachEvent = window.addEventListener;
    }
}

Hope it helps, It worked for me.

Poulenc

It was a real bug in JQuery - please see the accepted answer. – Silo